OPR 03/2021
12
only perform assigned functions. DBA access is controlled through Access Control Lists
(ACLs), as established by the system administrators. The process for a DBA to request
privileged DBA access is to create a ticket via the Remedy system, and the ticket is
reviewed/approved by the DBA’s supervisor and the GTM and the ISSO.
Passport (PPT) System Administrator: Passport (PPT) system administrators provide
system and application administration support for local Passport Centers throughout the
country. The system administrator can see and has access to information in the OPR
system. The local ISSO is responsible for reviewing and approving system administrator
accounts.
Internal DoS Passport Users: Following are the Internal DoS Passport user
responsibilities and the related access, as approved by supervisors:
- PPT Adjudicators: Access to case summaries and searches in the OPR system.
- PPT Agency Director & PPT Assistant Director: Access to information to support
management activities. Can access all OPR information.
- PPT Image Supervisor, PPT Image Reviewer and PPT Image Editor: Access to the
image worldwide case queue, which contains the photo gallery.
- PPT Communications Supervisor and PPT Communications Clerk: Access to
assigned cases, some case queues and some service tasks.
- PPT Passport Service Associate: Can view and edit the contents of service requests
(passport renewals) submitted by customers.
- PPT Site Administrator: Ability to view the number of passport applications in
progress and a report of exception cases.
- PPT Executive: Access to case search tasks, site administration tasks. The PPT
Executive can access all information in OPR.
- PPT Legal Reviewer: Access to the case summary for Legal CLASS lookouts,
reference data checks and notes, and the passport headquarters legal queue. The legal
reviewer has access to all OPR information.
- PPT Fraud Reviewer: Access to the fraud case queue. The Fraud Reviewer has
access to all the information in OPR.
- PPT HQ Adjudication Reviewer: Access to the case summary notes and the passport
headquarters adjudication queue. The PPT HQ Adjudicator has access to all the
Fraud Case information in OPR.
- PPT HQ Fee Issue Reviewer: Access to the pre-adjudication issues worldwide case
queue. The fee issue reviewer has access to all the information in OPR.
- PPT National Customer Service: Limited access to OPR information in the search
functionality in support of call center tasks.
- PPT Business Administrator: Access to OPR administrable information.
(e) What monitoring, recording, auditing safeguards, and other controls are in place to
prevent the misuse of the information?
Various technical controls are in place to deter, detect, and defend against the misuse of
personally identifiable information (PII). At the case/application level data changes are